Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: sJ+BdKrbV+MkSe5b2bi3L1XynYK0bvsQPkAFCPoNQXM=
Subject key identifier: 1D:AB:AA:28:34:8F:C1:AA:4A:03:11:AB:0A:F6:28:3A:9C:5F:05:F3
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 01A0C5C4F1A3F3CF4375A55D42F486CA1752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 1ABF
Signing time: Mon 21 Sep 2026 21:00:13 +0000
Manifest this update: Mon 21 Sep 2026 21:00:13 +0000
Manifest next update: Tue 22 Sep 2026 21:00:13 +0000
Files and hashes: 1: 1-gD4Hq6k3_IBwrhpxMMG_5-Bhrc.roa (hash: D/5u0x0tc9amqj7LxNMrUHo2Ohz0yRVArWNlJ2DKIqA=)
2: 3Ntb8637r4izsCpVwd5gcAHqdG4.roa (hash: v8fDaBY/Qsb7VQFSR88lHqJauVxk7NICenthut3N3XE=)
3: CYt9Nv9dBKT9g5TLwV4c4DEZGU0.roa (hash: rA9XhkKgyB7cXpzG2udSGKxNb3vtZoJSLVB744tVVnU=)
4: LKLutE-uCKR41ay5iaoVFawv-Gs.roa (hash: oOu8i7EWf5PBDu9YcMHQbEXmrmW+EZz9feEFexijuIs=)
5: OUSNJic16YHsFdydiuaFE2ZdqEU.roa (hash: Te9uOokwyk9iyAdeUIheCIvhMu20V8m5YnWWnhDRCII=)
6: QYcFCUvrty_eEw95bsUeyFFjK-c.roa (hash: jbyRPBMO6AQ8+x+sL1BfcSXlfYOvQy8bP202dnbtn6o=)
7: SaQLJTN3Tu68cjM5ZHbz4FW_mpg.roa (hash: WsziI7VNkNBzfhBKLzBNR8KU16oQ4434je9QUJEHNAU=)
8: UGEJJcZYX8ZqmsD8dq4DTSZFnYc.roa (hash: 6bDdvrBRvK8z6fMbmEov7BImiOdq7uQJNPOcRdfO/mo=)
9: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: b02rGwraRrBm1hTlFlxuJUMo/nXbIK7py9+njamk/r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c4:f1:a3:f3:cf:43:75:a5:5d:42:f4:86:ca:17:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Sep 21 21:00:13 2026 GMT
Not After : Sep 22 21:00:13 2026 GMT
Subject: CN=1dabaa28348fc1aa4a0311ab0af6283a9c5f05f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:98:4c:49:20:68:68:95:2a:e9:e5:8a:31:
33:7d:e4:55:a3:95:2b:fe:c1:f3:ca:9e:fd:b9:c0:
21:0d:38:d1:fa:2b:74:83:df:26:17:2d:45:78:19:
64:bf:a6:7c:e3:3b:72:46:b0:a1:16:db:30:78:ed:
39:0d:a4:c8:f5:0c:89:48:8c:33:e8:94:84:8d:a6:
bf:db:e0:5c:65:0e:d4:2b:72:d3:79:c1:67:3e:da:
b9:d4:fe:46:c1:e3:14:3c:90:89:e0:71:fc:8e:0c:
47:31:d7:01:44:9a:ae:6e:76:72:8c:18:0c:2a:86:
84:0b:45:ce:7e:b4:ec:3e:c3:29:d6:1f:d7:61:8a:
07:1b:fe:7c:0b:db:8e:75:ff:43:46:7a:a5:5b:62:
e4:b8:88:79:ec:50:cb:a3:4f:7c:aa:47:5d:15:85:
7c:49:c3:63:5e:73:54:87:73:d4:b2:b9:d1:51:db:
a3:c5:56:da:c4:9c:36:29:a5:a4:8a:e3:14:f5:24:
90:04:5c:8d:0e:72:30:b8:11:05:4a:2f:c3:e5:06:
8d:ff:f7:e1:7e:b1:d0:df:08:f8:9b:f9:72:00:40:
2b:93:c4:dc:9d:ba:f9:50:be:28:da:b6:7f:eb:7e:
a1:4e:d1:55:c6:98:92:8f:98:06:6a:c9:70:bf:68:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AB:AA:28:34:8F:C1:AA:4A:03:11:AB:0A:F6:28:3A:9C:5F:05:F3
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b6:cf:a8:3d:c1:9f:5d:8a:04:05:75:29:75:35:e6:9e:81:
3f:93:82:09:27:d4:6f:7b:a4:73:d6:c6:bd:b1:bb:58:44:3f:
fc:18:28:9a:75:4e:34:40:3b:8f:a7:86:15:23:ee:be:0d:63:
32:0e:25:ac:d0:db:b8:af:db:24:35:2b:01:75:31:d6:6b:29:
18:f0:5b:48:6a:45:77:a4:36:3b:88:f2:52:03:de:b8:01:2c:
d3:55:2d:cc:be:1d:42:62:a8:d4:00:3e:df:55:a7:65:c6:dc:
17:68:0c:fe:ec:d2:f4:95:91:bd:d6:e7:35:7a:6d:a7:c0:b8:
1a:76:33:51:3a:df:c5:81:4e:44:39:5f:8f:29:dd:0e:b7:59:
59:5e:48:c9:cb:30:3e:3d:71:e7:92:cf:8a:20:03:4c:e0:59:
3e:29:31:f1:1e:96:b3:36:97:41:c8:51:ed:09:be:02:77:f7:
7a:93:08:38:bf:79:0b:08:86:17:33:5d:76:25:d3:d8:84:38:
14:b6:0b:8e:40:c4:46:bf:cb:71:04:5f:92:1b:a5:ef:75:36:
0c:4c:2c:78:f9:ea:9b:60:c3:27:38:29:d2:77:e0:fd:da:af:
6b:ca:f2:1c:88:4d:cd:b1:c8:03:28:10:c1:88:e1:bb:bc:f4:
20:58:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:04:26 2026 by rpki-client